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(57) Abstract 

A system for copy protection of recorded information is disclosed, comprising an information carrier, a recorder and a player. The 
information carrier, e.g. an optical disc, comprises a medium mark representing a first bitpattem, which medium mark cannot be copied on 
standard recording devices. The recorded information comprises a watermark representing a second bitpattem, which second bitpattem has 
a predefined relationship to the first bitpattem. The watermark cannot be manipulated without disturbing the quality of the reproduction of 
the information. The relationship, preferably a one-way function, between the watermark and the medium mark requires that an illegal copy 
also has the corresponding medium mark. As neither the watermark nor the medium mark can be manipulated, a strong protection against 
illegal copying is achieved. The recorder comprises encoder means for embedding the watermark in the information and generator means 
for generating the second bitpattem according to said relationship. The player comprises verification means for verifying said relationship. 
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System for copy protection of recorded signals. 



The invention relates to a system for copy protection of recorded 
information, comprising an information carrier comprising a medium mark representing a 
first bitpattem, a recorder for recording the information on the information carrier and a 
player for reproducing the recorded information from the information carrier. 
5 The invention further relates to a recorder for recording information on an 

information carrier comprising a medium mark representing a bitpattem. 

The invention further relates to an information carrier comprising 
recorded information and a medium mark representing a bitpattem. 

The invention further relates to a player for reproducing information from 
10 an information carrier and comprising means for detecting a medium mark representing a 
bitpattem. 

Copy protection has a long history in audio publishing. The presently 
installed base of equipment, including PC's with audio cards, provide little protection against 
unauthorized copying. In any copy-protection scheme, the most difficult issue is that a pirate 

15 can always attempt to playback an original disc, he can treat the content as if it were an 
analog home recording and record this. Consumer recorders should be able to copy 
recordings of consumer's own creative productions without any limitation, but prohibit the 
recording of copy-right material. Thus, the copy protection mechanism must be able to 
distinguish between consumers' own creations and content that originates from professional 

20 music publishers. The equipment must make this distinction based on the content only, as 
any reference to the physical source of content (e.g. disc or microphone) is unreliable. For 
digital storage media such as DCC, "copy bits" have been defined, which bits indicate a 
copyright status, e.g. "no copy allowed", "free copy" or "one generation of copy allowed". 
Other copy bits may indicate that the medium storing the information must be a 

25 "professional" medium manufactured by pressing and not a "recordable" disc. 

A system for copy protection of recorded information comprising a 
recorder, information carrier and player, is known from EP-0545472 (Dl of the list of 
relevant documents). The copy protection is based on a so-called medium mark, i.e. a 
physical mark representing a bitpattem indicating the status of the medium, e.g. a code 
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indicating a "professional" disk manufactured by pressing. A medium mark should not be 
copyable or changeable by standard recording equipment, and therefore it is to be stored on 
the information carrier in a manner different from the recorded information, such as audio or 
video. The medium mark is detected by the player and if it is not present or indicates a 
5 different status (e.g. "recordable disc" on an iUegal copy), reproduction is blocked. The 
known information carrier comprises a prearranged guiding track, a so-called pregroove. In 
the track determined by the pregroove, information can be written in a predefined manner 
represented by optically readable patterns which are formed by variation of a first physical 
parameter, such as the height of the scanned surface. The pregroove has variations in a 
10 second physical parameter, such as an excursion in a transverse direction, also denoted as 
wobble. The wobble is FM modulated and this modulation represents a bitpattem which is 
used for recovering the information, e.g. a descramble code for recovering information 
stored as scrambled information. Said bitpattem constitutes a medium mark, because the 
track wobble cannot be copied to a recordable disc on standard recording equipment. The 
15 known player comprises reading means for reading the optical patterns and recovering means 
for recovering the bitpattem from the medium mark. The player and information carrier 
form a system for controlled information reproduction. For this purpose, the player 
comprises means for reproducing the information in dependence on the medium mark. If the 
information is copied on a writable information carrier, the information of Uiis copy will not 
20 be reproduced by a player, because during the writing process only the optical patterns are 
written in the predefined manner and the copy itself does not contain any medium mark. 

A problem in the known system is that copying the information after 
reproduction cannot be sufficientiy controlled. If die information comprises said copy bits, 
such bits can be manipulated easily, e.g. on a PC or in a small electronic circuit. The 
25 information wiUi the manipulated bits can be copied freely. If the information is recorded in 
a scrambled way and de-scrambled during reproduction using the medium mark bitpattem, 
the information can be recorded in its plain (descrambled) status and is not protected against 
copying at all. 

It is an object of the invention to provide a system in which copying is 
30 better controlled and the copy protection cannot be circumvented by simple manipulation of 
the copy bits. 

For tills purpose, the system according to the invention is characterized in 
that the recorded information comprises a watermark representing a second bitpattem, which 
second bitpattem has a predefined relationship to the first bitpattem, and in that tiie recorder 
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comprises encoder means for embedding the watermark in the information and generator 
means for generating the second bitpattem according to the predefined relationship between 
the first and the second bitpattem, and in that the player comprises verification means for 
verifying the relationship between the second bitpattem and the first bitpattem. The 

5 watermark is indicative of the copyright status of the recorded information. This has the 
advantage, that a signal representing the information after reproduction still comprises the 
watermark and a recorder can be aware of the copyright status of the signal offered for 
copying, whereas the copyright status of the signal indicated by the watermark cannot be 
changed or manipulated witiiout disturbing the signal. The prior art system using die medium 

10 mark as descramble key or a fixed code is vulnerable to an 'illegal' recordable disc have a 
fixed, false medium mark. For example, any. information read from a scrambled copy 
protected disc can be recorded on an illegal copy after (re-) scrambling using the fixed, false 
key. The relation between the watermark bitpattem and tiie medium mark bitpattem requires 
that the medium mark bit correlates with the recorded information. Hence in the system 

15 according to die invention a fixed, false medium mark cannot be used to make illegal copies. 
As there is a predefined relation defined between die first (medium) bitpattem and die second 
(watermark) mark bitpattem, a strong copy protection is realized, because an illegal copy 
must contain the specific medium mark correlated to the watermark according to the 
predefined relation and tiierefore die malicious party is forced to get hold of said relation for 

20 manipulation. Choosing a suitable relation can create a barrier against such manipulation. 
The detection of the watermark in the player is relatively simple and die information read 
from the information carrier does not require any processing, such as descrambling. 
Verification in the player of the watermark bitpattem against the medium mark is a sU-ong 
protection against copying, as neither of said marks can be easily manipulated. A furdier 

25 advantage is, that die verification function in the player can be relatively slow, as die 

verification of said predefined relationship needs to be performed only once when starting die 
reproduction of the recorded information. 



published after the priority date of this invention (PHN 15391, document D2) describes a 
30 watermarking system for a video signal. The watermarked video signal is recorded on a disk 
comprising a medium mark. However the medium mark only indicates the type of medium 
and has no correlation with the signal or the watermark. 



relationship comprises a cryptographic one-way function. The one-way function prevents diat 



It is to be noted, diat WO 97/13248-Al, which is filed before but 



A prefeaed embodiment of the system is characterized in that the 
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when the required result (e.g. the watermark bitpattem) is known, that the source (e.g. the 
medium mark bitpattem) can be found by calculating 'backwards'. This has the advantage, 
that the malicious party is forced to obtain the medium mark bitpattem direcUy from the 
original medium. The original medium may not be available to him or the player may be 
5 equipped not to make the medium mark bitpattem externally available. This creates a 
significant barrier for the malicious party trying to make an illegal copy with a "Chinese" 

copy of the medium mark. 

These and other aspects of the invention will be apparent from and 
elucidated with reference to the embodiments described hereinafter and with reference to the 
10 accompanying drawings, in which 

Figure 1 shows conditional playback rules, 

Figure 2 shows a copy protection system comprising a recorder, 
information carrier and player. 

Figure 3 shows a one-way function, 
15 Figure 4 shows a recorder, and 

Figure 5 shows a player. 
We propose a copy control method for bitstream- or DSD-signals (Direct Stream Digital) 
stored on storage media such as DVD audio (Digital Versatile Disc). The method relies on a 
watermarking method, such as the one proposed by A.A.M. Bruekers et al, described in 
20 document D3 of the list of relevant documents. RecenUy, it has been realized that 

watermarks or embedded signalling can be used to make copy protection methods more 
robust against attacks. Embedded signalling or watermarking is a method of burying 
information in the audio content. In this text we use the word professional for any product 
that is officially registered with a trusted party which represents the interests of the recording 
25 industry and hardware manufacturers. We denote any other product as a consumer product. 
Consumer products are assumed to obey copyright rules, enforced either by a patent 
licensing agreement or by law, or both. 

For Copy Protection a total solution is needed. Watermarking is not restricted to digital 
formats, but can also be embedded and detected in analog signals. Often, spread-spectrum 
30 technology is proposed for embedding watermarks into audio. A technical difficulty of 
spread-spectrum methods is that retrieval or detection of such embedded data requires 
substantial signal processing. Although this is not a problem for professional equipment used 
in legal cases to prove the origin of the audio material, the computational effort appears far 
beyond what is feasible and economically reasonable within consumer electronic products to 
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support copy protection. A particular problem is that the audio quality requirements set by 
the music industry would require such large spreading gains that synchronization and data 
detection would take excessively long integration times. Parameters considered in spread 
spectrum watermarking presumably do not satisfy current audio quality requirements. Future 
5 standards aim at further enhancing the audio quaUty and simultaneously require secure 
protection of music IPR. It is our strong beUef that it is unlikely that satisfactory methods 
will indeed be found in near future to combine these two requirements at reasonable cost. 
Particularly the absence of protective measures in die installed base of audio equipment 
causes a problem. It appears virtually impossible to avoid that signals can be copied by going 
10 back to analog. Moreover, consumer expectations are that some kind of home taping, e.g. to 
listen in the car, should be possible. On top of that, in some countries that levy a fee on 
blank tape for analog copying for private use, certain technical means to restrict analog 
copying are not legally acceptable. There appears an opportunity to set new standards for 
storage and representation of digital audio (e.g. DVD), but technology to solve the copy 
15 protection issue completely (i.e., including analog copying) is unlikely to become available 
soon. For audio a bitstream-only solution may be of use. Given this situation, it can be 
useful to protect new audio storage media against "Chinese" copying of discs, even if analog 
copying remains possible. In order to copy, conversion into other domains (e.g. analog) are 
needed and some loss of quality occurs. The scheme proposed here using digital 
20 watermarking does not solve the existing problem of piracy and excessive home taping 

whereby the audio signal is converted to analog as part of the copy process. If the industry 
adopts a copy protection scheme based on watermarking, it will presumably come to a 
layered approach. The most robust watermark should withstand D/A and A/D conversion, 
but this will require long integration times for the detection. This implies that the record or 
25 playback inhibit decision will be delayed. A watermark in the bitstream can be detected 
within milliseconds and trigger copy protective measures immediately. Such fast detection 
appears essential if bitstream signals are transferred over open busses (such as P 1394). In 
summary, the method described in this document has the following properties: 

- Bitstream or DSD signals with copy-right restrictions can immediately be distinguished 
30 from home recordings. 

- Traceability of the professional or consumer recorder. 

- It can co-exist with other methods that also protect against other forms of copying (e.g. 
analog). In particular, it appears of interest to add conditional playback using the method 
proposed here to a conditional recording method which also checks for spread spectrum 
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watermarks. 

In the invention we propose a scheme that protects against direct (bitwise) copying of high 
quaUty digital DSD streams. The method does not technically protect against conversion of 
DSD to PCM or analogue. However, some protection is provided against such attacks in the 

5 sense that if a bitstream / DSD signal, it is converted back into DSD may be watermarked 
with the serial number of the consumer DSD encoder. The method relies on a watermarking 
method, such as the one proposed by A.A.M. Bruekers et al. Our method can coexist with 
many other forms of copy protection, including serial copy management bits and the 
embedded signalling of spread spectrum watermarking. The additional hardware in consumer 

10 equipment appears very small. Another tool used in the system embodiment is a medium 
mark, i.e. a method to distinguish a professionally mastered disc from a recordable. 
Implementations of such tool can be a wobble key (as known from Dl), modulation of 
channel code errors (e.g. EFM) or intentional modulation the jitter of pits and lands of a 
disc, or embedding an on-disc chip, or just data written in the lead-in area which is not 

15 accessible by consumer recorders. These two tools (watermark and medium mark) are used 
to support the following features (both or just one): 

- Conditional recording is the most commonly known method for copy protection. A 
consumer recorder wiU not record material unless it sure that the material may indeed be 
copied legally. 

20 - Conditional playback, on the other hand, accepts that some people will be able to get the 
bits of copy-righted DSD on a pirate disc anyhow. 

Conditional playback will make sure that such a pirate disc can not playback on consumer 
players. That is, pirates cannot commercially distribute illegal copies. In conditional 
playback, a consumer DVD audio player will only play audio discs if certain copyright 

25 conditions are met. The player identifies the audio content either as a consumer recording or 
as professionally published audio content, by detecting or checking for a watermark in the 
audio stream. In the latter case (professional content protected by copyright), the player 
checks whether the physical disc is original and professionally mastered, rather than a copy 
on a consumer recorder or consumer disc press. This requires both a marking method for the 

30 content (watermarking) and a method for marking the physical storage medium that can only 
be produced by a professional recorder or pressing machine. 

Figure 1 shows schematically the conditional playback rules embedded in 
the consumer player, which are applied after a watermark has been detected. As a first check 
11 the presence of the medium mark, usually a physical mark, is detected by the reading 
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head in a manner different from reading recorded information, e.g. by demodulation said 
wobble. If the medium mark is present it is verified to be a valid professional disc mark at a 
second check 16, and if so playing 17 is enabled if the watermark and the medium mark 
correlate according to a predefined relation. If the medium mark is not present or indicates a 

5 consumer recorded disc (checked in a third check 12), the watermark is decoded in decoder 
13. The watermark may be indicative for free-to-copy (audio) information, and then playing 
14 of the disc is enabled. If the watermark is indicative for copy-protected information, the 
playing action is blocked in state 15. 

In a first embodiment of the system professionally mastered audio discs 

10 carry an identifier unique to the publisher, which can not be copied. This identifier can for 
instance be a set of bits written in an area that is not accessible for recorders, it can be a 
wobble key or a special pattern in the running DC component of the EFMplus channelcode 
used in DVD. The DVD audio player checks for this mark. If this mark is unavailable or if 
it contains a special code reserved for home disc recorders, it will only playback the DSD 

15 sti-eam if a special watermark is found that identifies die DSD encoder. If this watermark is 
not found, as would be the case if a professionally released audio stream is copied illegally to 
a recordable disc, the audio is not played back at all. To avoid any degradation of the quaUty 
of professional DSD releases this scenario does not require that the audio content of 
professionally released audio tides is watermarked, but this scenario requires that the 

20 watermark embedding method is used in consumer equipment. Besides a frequentiy repeated 
copy control bit, a unique serial number is embedded into the audio stream by all DSD 
encoders/recorders in the consumer market. The circuitiy to embed this number appears 
simple. The consumer can not copy professional DSD audio direcUy to a DVD audio disc, as 
it will not playback (because of the watermark be absent). If he converts the signal to analog, 

25 PCM or another format, and then re-creates DSD, the particular DSD recorder can be 
tiaced. Moreover, the scheme can be defined in such a way that home recordings have 
smaller dynamic range. A further sti-engthening is achieved if each player not only checks 
whether a watermark is present on consumer discs, but also check whether a valid serial 
number is embedded. Known cryptographic methods can be used for integrity checks, e.g. 

30 concatenating a digital signature to the serial number. This avoids that a pirate can tamper 

with serial numbers. 

A second embodiment is similar to the first, but the bit stream of 
professionally released audio does also contain a watermark. This watermark is used to 
verify the medium mark in a cryptographic way. The medium mark now differs from tide to 
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titie. The relation between the bitpattem represented by the watermark and the bitpattem 
represented by the medium mark is not easy to manipulate. Preferable the cryptographic 
relation is chosen as foUows. Let y = F(x) and x = G(u) be two cryptographic one-way 
functions, i.e. tiieir inverse is computationally infeasible to compute with finite ariUimetic 

5 resources. This scenario uses a seed u to create x and y, according to x = G(u) and y = 
j!(x)= F(G(u)). In tiiis concept G and F may be tiie same function, but tius is not necessary. 
On a professionaUy mastered disc, tiie embedded watermark contains y and the medium mark 
carries x. Professional recorders always perform tiie G function before writing a medium 
mark. That is, they embed a medium mark x which is internally generated from tiie user 

10 input u. All (consumer) players perform F to verify Uie medium mark if a watermark is 
found that indicates that the content is copy protected. Consumer recorders are assumed not 
to be able to write a medium mark at all. Using the system the copy-right owner can decide 
himself whether or not to release the seed u, which allows copying. In professional music 
publishing, it can be necessary to create a tape master of the music tiUe. The audio is then 

15 pre-encoded witii embedded the watermark y. During tiie production process, tiie 

professional recorder (disc master generator machine) directiy accepts tiie watermarked DSD 
30 and inserts this after the DSD encoder/watermarker 23 of Figure 2. Seed u 22 is also 
inserted during tiiis process. This also provides some protection if the master tape is stolen, 
but u is not compromised. Preferably, tiie recorder checks the watermark against u and x (as 

20 described with Figure 4, conditional recording). 

Figure 2 shows a copy protection system comprising a recorder, 
information carrier and player. The Professional Recorder comprises an audio input 21 to a 
DSD encoder 23, which also embeds the watermark bitpattem y in the bitstream 30 to be 
recorded on the master disc 26. Said watermark bitpattem y is available on the output of 

25 generator 25, which has bitpattem x to be represented by the medium mark 20 on its input. 
The medium mark 20 is created on the master disc 26. Preferably the bitpattem x is 
generated by a generator 24 from the input seed u on the input 22. The master disc 26 is 
multiplied by the usual manufacturing methods to copy protected information carriers 27, 
which are to be played in tiie consumer player 28. The consumer player comprises a verifier 

30 29, which compares tiie detected watermark bitpattem y witii a calculated value y', which is 
based on tiie detected bitpattem x from the medium mark. 

In this scenario, a pirate must have access to a compromised professional recorder to create 
media marks on a pirate disc. A pirate can copy the audio and recover y, but he cannot 
calculate x. This system adds security to the copy protection scheme, particularly if we can 
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ensure that x cannot easily be read from the disc, i.e., remains within the first chip in the 
basic engine (that must use x to verify watermark y). Moreover, even if a pirate can read x, 
he must find u to enter it into the recorder and to have x written as medium mark. No 
recorder will directly accept to x and write it to disc. In this scenario, a pirate must 

5 physically modify both his (officiaUy registered mastering) recorder (to bypass the G 
function) and his player (to extract x). 

In a further embodiment copy protection can be provided for consumer 
recordings. It can be envisioned that consumers want to publish or disseminate their own 
recorded audio creations at a small scale. We now describe how consumer recorders can 

10 implement some of the elements of the above scheme. This gives consumers the possibility to 
create discs that can only be copied directly (bit-by-bit) if the recipient also knows seed u. 
Part of the medium mark must be recordable by the recipient. A possible embodiment is to 
split X into two parts, with x = Xi 1 1 Xz, such that y = F(Xi | | x^). Then x, acts as a 
medium mark, similar to the scenario described above, and X2 is written as a separate file on 

15 the disc. Professional recorders can write x, as well as Xj. Consumer recorders can write Xj 
but on recordable discs, x, has a default value x, = x_c prepressed on the disc. The 
consumer recorder embeds watermark y = F(x_c j j where X2 is generated from a seed u, 
i.e., by taking a portion of the bits of G(u). The owner can copy his own creations because 
he knows u. In players, neither x, nor X2 leaves the basic engine, so it remains hidden for the 

20 user. 

For the above embodiments a suitable relation between the watermark 
bitpattem and the medium mark bitpattem is a one-way function. An implementation of the 
one-way function can be y = x^ mod N with N a public modulus. Here N is the product of 
two secret large primes (N = p q). In fact N can be part of the data that is embedded in the 

25 watermark, i.e., concatenated to y. Another possibility is the discrete-log one-way function 
conjectured by Diffie and HeUman [1976] (= document D6): F(x) = of* in GF(p) with a a 
primitive element of GF(p). Here p is a large prime such that p-1 has a large prime factor. 
The above two implementations bear the disadvantage that the size of the arguments, i.e., the 
number of bits needed to be secure, is quite large. A practical system based on fewer bits 

30 can be to apply an appropriate secret-key encryption algorithm, e.g. the DES, with y = F(x) 
= X ® DES(x). This is illustrated in the circuit of Figure 3. Figure 3 shows an 
implementation of a one-way function generator based on secret-key encryption algorithm. 
On the input 31 the medium mark bitpattem x is applied and processed in the encryptor 32 
by using a key from a key input 33. The output of encryptor 32 is bitwise EXOR'd to the 
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input X by logic unit 34, resulting in bitpattem y on the output 35. In this circuit, the key can 
be made public or included in the watermark, i.e. concatenated to y. 

Figure 4 shows a recorder for consumers. The recorder has an analog 
audio input 41 connected to an encoder 42 for DSD or PCM audio encoding, which encoder 

5 produces on the ou^ut a bitstream 47 to be recorded on recordable disc 48. The encoder 42 
embeds a watermark bitpattem y in the bitstream 47. The bitpattem y is created by generator 
43 from a bitpattem x, whereas x is to be represented by a medium mark 46 and may 
comprise a number of bits derived from a prepressed physical mark on the recordable disc 
48. The recorder has a seed input 45 for a seed u connected to a generator 44 for generating 

10 the bitpattem x. The recorder has a second input 40 for a digital audio signal connected to a 
watermark checker 49. The checker 49 is also connected to generator 43 for receiving 
bitpattem y and verifies the presence of a watermark. The basic recording control function of 
the checker is to block recording if a professional "no-copy" watermark is detected. 
Preferably a watermark is embedded when no watermark is detected in the digital input 

15 signal. If a watermark is present indicative of copyable content a recording can be made only 
if the corresponding seed u is applied to the seed input 45. In a different embodiment the 
consumer recorder only has the digital input 40 and the watermark checker 49, whereas the 
analog input and watermark encoder are not present. Further embodiments of the recorder 
are equal to the above but are not provided with an external input 45, but have an internal 

20 generator for u, e.g. a random number generator. In that case also generator 44 may not be 
present. 

In its pure form, a conditional recording scenario does not perform checks 
during playback. In a different embodiment the consumer DSD recorder accepts an analog 
signal, possibly conditional to some analog copy information check. The on-board DSD 

25 encoder embeds a watermark into the stream. This mark consists of two parts: copy 

protection data and a serial id. number of the recorder. The consumer DSD recorder accepts 
a digital DSD stream only if it can recognize valid copy control data. This copy control data 
should state that this material may legally be copied onto a disc. Such a recorder is similar to 
the recorder shown in Figure 4, but does not have the seed input 45 and generator 44. 

30 The consumer DSD recorder does not accept a DSD stream that contains 

Copy Control Marks that prohibit recording. In an embodiment of a strong form, the absence 
of Copy Control Information is interpreted as "no copy allowed". In a weaker form, signals 
without copy control information are automatically resampled and watermarked. This 
weakens the copy protection, but leads to some quality degradation. 
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In a further embodiment a copy once feature is included. A professional 
DSD stream contains embedded copy-right data that grants permission to copy once. This can 
be implemented by embedding a further watermark y^ (in addition to mark described 
earlier). Moreover the professional disc contains a special permission mark where y„ = 
5 H(Xea) with HO a cryptographic one-way function. The mark yeo remains with the audio 
(possibly embedded) during playback, but it is removed by the consumer recorder. 

Figure 5 shows a player 52 for reproducing information from a copy 
protected information carrier 51. The player is provided with a read head 58 and read signal 
processing means of a usual type, such as an optical head, a detector, a channel decoder and 
10 an error decoder of a CD or DVD optical disc player. The player comprises watermark read 
means 55 for detecting a bitpattem y represented by the watermark in the recorded 
information on the information carrier 51. The bitpattem y is coupled to a logic unit 54, 
which operates the enabling switch 56. The logic function of unit 54 has been discussed with 
reference to Figure 1 and the conditional playback rules. The player is provided with means 
15 50 for detecting the medium mark and deriving the bitpattem x from the medium mark, e.g. 
by demodulating the wobble modulation as known from Dl. The player is provided with 
verification means for verifying a predefined relationship between the bitpattem x and the 
bitpattem y. The bitpattem x is coupled to a function unit 53 for performing a predefined 
function F(x), e.g. a one-way function. The output y* of the function unit 53 is coupled to 
20 logic unit 54 and compared to y. The enabling switch 56 passes the recovered audio signal to 
the output 57 if the bitpattems x and y do show said predefined relationship. 

It is noted that hybrid solutions using conditional recording and 
conditional playback can co-exist. Of particular interest is a scenario in which (despite 
technical difficulties described in the introduction) a watermark check in the analog domain 
25 should be performed by recorders. If a pirate manages to modify his recorder to bypass this 
conditional recording check, and put professional DSD on a disc anyhow, the copy protection 
schemes described here can prevent playback on players in the market. 

Although the invention has been explained mostly by embodiments using 
DSD audio, several embodiments of the watermarking of audio and/or video can be used. 
30 Watermarking is also possible for PCM audio. An example is hiding data in the LSB's, 

possibly including a spectral shaping of their effect. An implementation for such embedding 
scheme has been presented by Oomen et al. in 1994 (document D4). For our application, we 
preferably would only embed data in a limited number of preselected samples, with one bit 
per selected sample. Such embedding scheme can be implemented within the same device 
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that converts professional (24 bit) audio into lower resolution (e.g. 16 bits) The method 
previously mentioned for DSD watermarking (in D3) may also be used for embedding data in 
PCM. Another option is to use the loss-less encoding for embedded signalling. One method 
for lossless encoding was proposed by Bruekers et al (described in document D5) A possible 

5 method of embedding data is by choosing the properties or parameters of the predictive fdter 
(Fig. 10, item 152 in D5) in accordance with watermarking rules. For instance, a digital 
watermark "1" can be represented by choosing an even number of filter taps and a "0" is 
represented by an odd number of taps. In another implementation, the filter coefficients are 
quantized according to a simUar rule. Further, the entropy encoder can embed data by 

10 adapting its parameters. Such signals embedded into the PCM signal can be used to buQd a 
copy protection scheme based on any of the previously mentioned concepts. A pirate can no 
longer copy the compressed PCM bit-by-bit onto a disc that he can distribute commercially. 
He must go through the process of decompression and compression. Although this does not 
lead to a degradation in quality (because the coding is loss-less), it results in a different 

15 digital signal, the resulting file will contain more bits if consumer recorders can compress 
less efficiently and the resulting file will contain information about the serial number of the 
recorder. 

In the embodiments a disc has been described as information carrier, but 
any other carrier can be used in the invention, such a tape or broadcast, as long as the 
20 medium mark is supplied in a way which cannot be easily copied. Further the invention lies 
in each and every novel feature or combination of features. 
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CLAIMS: 



1^ System for copy protection of recorded information, comprising an 

information carrier comprising a medium mark representing a first bitpattem (x), a recorder 
for recording the information on the information carrier and a player for reproducing the 
recorded information from the information carrier, characterized in that the recorded 

5 information comprises a watermark representing a second bitpattem (y), which second 
bitpattem has a predefined relationship to the first bitpattem, and in that the recorder 
comprises encoder means (23) for embedding the watermark in the information and generator 
means (25) for generating the second bitpattem according to the predefined relationship 
between the first and the second bitpattem, and in that the player comprises verification 

10 means (29) for verifying the relationship between the second bitpattem and the first 
bitpattem. 

2. System as claimed in claim 1, characterized in that the relationship 

comprises a cryptographic one-way function. 

3^ System as claimed in claim 2, characterized in that the second bitpattem 

15 (y) is generated by applying a one-way function to the first bitpattem (x). 

4. System as claimed in claim 1, 2 or 3, characterized in that the second 
bitpattem identifies the encoder means. 

5. Recorder for use in the system of claim 1, 2, 3 or 4 for recording 
information on an information carrier comprising a medium mark representing a first 

20 bitpattem (x), characterized in that the recorder comprises encoder means (42) for embedding 
a watermark in the information, the watermark representing a second bitpattem (y), and 
generator means (43) for generating the second bitpattem according to a predefined 
relationship between the first and the second bitpattem. 

6. Recorder as claimed in claim 5, characterized in that the recorder 

25 comprises marking means (46) for creating the medium mark on the information carrier and 
in that the generator means comprise means (44) for generating the first bitpattem from a 
seed (u) according to a further predefined relationship. 

7 Recorder as claimed in claim 5 or 6, characterized in that the generator 

means (43) are arranged for generating the first bitpattem (x) by combining a first part (xj 
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represented by a prepressed mark on a recordable information carrier and a second part (xj) 
generated from the seed (u), 

g Recorder as claimed in claim 6 or 7, characterized in that the further 

predefined relationship comprises a cryptographic one-way function. 
5 9, Information carrier for use in the system of claim 1, 2, 3 or 4, the 

information carrier (51) comprising recorded information and a medium mark (50) 

representing a first bitpattem (x), characterized in that die recorded information comprises a 

watermark representing a second bitpattem (y), which second bitpattem has a predefined 

relationship to the first bitpattem, 
10 10. Information carrier as claimed in claim 9, characterized in that the first 

bitpattem comprises a first part (xj identifying a source of the information carrier, and a 

second part (x^ identifying the recorded information. 

11. Player for use in the system of claim 1, 2, 3 or 4 for reproducing 
information from an information carrier (51) and comprising means (50) for detecting a 

15 medium mark representing a first bitpattem (x), characterized in that the player comprises 
watermark read means (55) for detecting a second bitpattem (y) represented by a watermark 
in the recorded information, and in that the player comprises verification means (53,54) for 
verifying a predefined relationship between the second bitpattem and the first bitpattem. 

12. Player as claimed in claim 11, characterized in that the verification means 
20 comprise a cryptographic one-way function (53). 

13. Player as claimed in claim 12, characterized in that the verifications 
means are arranged for generating a verification pattern (y') by applying a one-way function 
to the first bitpattem (x) and comprises means (54) for comparing the verification pattem (y') 
and the second bitpattem (y). 
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